      Type                Value    Reference
  ----------------------------------------------------------------------
  pa-tgs-req                 1    RFC 4120
  pa-enc-timestamp           2    RFC 4120
  pa-pw-salt                 3    RFC 4120
  [reserved]                 4
  pa-enc-unix-time           5    (deprecated)
  pa-sandia-secureid         6
  pa-sesame                  7
  pa-osf-dce                 8
  pa-cybersafe-secureid      9
  pa-afs3-salt               10
  pa-etype-info              11   RFC 4120
  pa-sam-challenge           12   (sam/otp)
  pa-sam-response            13   (sam/otp)
  pa-pk-as-req-old           14   draft-ietf-cat-kerberos-pk-init-09
  pa-pk-as-rep-old           15   draft-ietf-cat-kerberos-pk-init-09
  pa-pk-as-req               16   RFC 4556
  pa-pk-as-rep               17   RFC 4556
  pa-pk-ocsp-response        18   RFC 4557
  pa-etype-info2             19   RFC 4120
  pa-use-specified-kvno      20
  pa-svr-referral-info       20   (referrals)
  pa-sam-redirect            21   (sam/otp)
  pa-get-from-typed-data     22   (embedded in typed data)
  td-padata                  22   (embeds padata)
  pa-sam-etype-info          23   (sam/otp)
  pa-alt-princ               24   (crawdad@fnal.gov)
  pa-server-referral         25   (referrals)
  pa-sam-challenge2          30   (kenh@pobox.com)
  pa-sam-response2           31   (kenh@pobox.com)
  pa-extra-tgt               41   Reserved extra TGT
  td-pkinit-cms-certificates 101  CertificateSet from CMS
  td-krb-principal           102  PrincipalName
  td-krb-realm               103  Realm
  td-trusted-certifiers      104  PKINIT
  td-certificate-index       105  PKINIT
  td-app-defined-error       106  Application specific
  td-req-nonce               107  INTEGER
  td-req-seq                 108  INTEGER
  td-dh-parameters           109  PKINIT
  td-cms-digest-algorithms   111  draft-ietf-krb-wg-pkinit-alg-agility
  td-cert-digest-algorithms  112  draft-ietf-krb-wg-pkinit-alg-agility
  pa-pac-request             128  MS-KILE
  pa-for-user                129  MS-KILE
  pa-for-x509-user           130  MS-KILE
  pa-for-check-dups          131  MS-KILE
  pa-as-checksum             132  MS-KILE
  pa-fx-cookie               133  draft-ietf-krb-wg-preauth-framework
  pa-authentication-set      134  draft-ietf-krb-wg-preauth-framework
  pa-auth-set-selected       135  draft-ietf-krb-wg-preauth-framework
  pa-fx-fast                 136  draft-ietf-krb-wg-preauth-framework
  pa-fx-error                137  draft-ietf-krb-wg-preauth-framework
  pa-encrypted-challenge     138  draft-ietf-krb-wg-preauth-framework
  pa-otp-challenge           141  (gareth.richards@rsa.com)
  pa-otp-request             142  (gareth.richards@rsa.com)
  pa-otp-confirm             143  (gareth.richards@rsa.com)
  pa-otp-pin-change          144  (gareth.richards@rsa.com)
  pa-epak-as-req             145  (sshock@gmail.com)
  pa-epak-as-rep             146  (sshock@gmail.com>)
  pa-pkinit-kx               147  draft-ietf-krb-wg-anon
  pa-pku2u-name              148  draft-zhu-pku2u
  pa-supported-etypes        165  MS-KILE
  pa-extended-error          166  MS-KILE
